Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Graphics

Use After Free in Graphics

Integer Overflow or Wraparound in Graphics

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Use After Free in Graphics Linux

Improper Access Control in Graphics Linux

Use of Out-of-range Pointer Offset in Video

Use After Free in Graphics Linux

Access of Uninitialized Pointer in SPS Applications

Integer Overflow or Wraparound in Core Services

Configuration Issue in Core

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Integer Overflow or Wraparound in Radio Interface Layer

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Buffer Copy Without Checking Size of Input in SPS Applications

Improper Input Validation in Core

Improper Authorization in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS

Use After Free in DSP Service

Improper Input Validation in HLOS

Improper Validation of Array Index in HLOS

Improper Access Control in Core

Improper Access Control in Kernel

Improper Validation of Array Index in WLAN HAL

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode

Memory corruption in WLAN HOST while receiving an WMI event from firmware

Memory corruption due to improper access control in kernel while processing a mapping request from root process

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Firmware

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Buffer Over-read in Video

Reachable Assertion in Data Modem

Incorrect Type Conversion or Cast in Multi-Mode Call Processor

Improper input validation in Multi-Mode Call Processor

Improper Input Validation in Multi-Mode Call Processor

Improper input Validation in Multi-Mode Call Processor

Improper Input Validation in Multi-Mode Call Processor

Reachable Assertion in Multi-Mode Call Processor

Reachable Assertion in Multi-Mode Call Processor

Improper Release of Memory Before Removing Last Reference in Data Modem

Improper Release of Memory Before Removing Last Reference in Data Modem

Improper Input Validation in Multi-Mode Call Processor